Happy holidays from ISC!
ISC is fortunate to have staff members in so many different countries around the world: our software development benefits from all the different perspectives - and we benefit personally!
Read post
Today ISC is pleased to announce the release of BIND 9.18.0. This is the first stable release that contains support for DoT and DoH. This branch will be supported for 4 years, through the end of 2025. With this new branch, the BIND 9.11 branch is officially EOL. We will continue to issue security patches for 9.11 for the remainder of Q1 2022, but that will be the end of maintenance for 9.11.
This new release of BIND is available on our downloads page.
Significant work covered in the 9.18.0 branch includes:
- Support for securing DNS traffic using Transport Layer Security (TLS). TLS is used by both DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH).
- Support for zone transfers over TLS (XFR-over-TLS, XoT) for both incoming and outgoing zone transfers.
- The dig tool is now able to send DoT queries (+tls option).
- Support for OpenSSL 3.0 APIs was added.
You can read more about this new edition of BIND in the release notes.
References
- BIND Administrative Reference Manual for 9.18.0
- We have updated the BIND Significant Features Matrix.
- Please see this KB article on Changes to be aware of when moving from BIND 9.11 to 9.16, as well as this article on BIND Memory Consumption Explained.
- ISC’s Software Support Policy and Version Numbering explains the release cycle.